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DETAILED ACTION 

This Final Office Action is in response to the application filed on March 26, 2004 
and the response to the Election/Restriction requirement filed on February 26, 2008. 

Claim Rejections - 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

Claims 1, 13, 15, 23, 24, 33, 97, 101, and 112 are rejected under 35 U.S.C. 112, 
first paragraph, as failing to comply with the written description requirement. The 
claim(s) contains subject matter which was not described in the specification in such a 
way as to reasonably convey to one skilled in the relevant art that the inventor(s), at the 
time the application was filed, had possession of the claimed invention. Specifically the 
phrase, "automatically modifying the weight of at least one of the plurality of rules based 
on the result" in lines 12-13 of claim (similarly recited in claims 13, 15, 23, 24, 33, 97, 
101, and 112) is not present in the specification. While the specification does provide 
support for adjusting the weight of one of a plurality of rules, it does not provide support 
for automatically modifying them. 

Claim Rejections - 35 USC § 101 
35 U.S.C. 101 reads as follows: 



Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 
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Claim 1-28 and 97-116 are rejected under 35 U.S.C. 101 because the claimed invention 
is directed to non-statutory subject matter. 

A 35 USC 101 process must (1 ) be tied to another statutory class (such as a 
particular apparatus) or (2) transform underlying subject matter (such as an article or 
materials) to a different state or thing. To qualify as a 35 USC 101 statutory process, 
the claim should positively recite the other statutory class (the thing or product) to which 
it is tied, for example by identifying the apparatus that accomplishes the method steps, 
or positively recite the subject matter that is being transformed, for example by 
identifying the material that is being changed to a different state. Since neither of those 
requirements is met by the claims, the method is not a patentable eligible process under 
35 USC 101 and is rejected as being directed to non-statutory matter. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-28, 33-60, and 97-1 16 are rejected, insomuch as the claims are best 
understood given the 35 USC 101 and 112 first paragraph rejections (as advanced 
above), under 35 U.S.C. 103(a) as being unpatentable over U.S. PGPub. No. 
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2002/0099649 (Lee et al. '649) in view of U.S. PGPub. No. 2002/016171 1 (Sartor et al. 
711). 

With respect to claims 1-8 and 33-40, Lee et al. '649 disclose a method/system 
performed by an information handling system ("IHS"), the method comprising: receiving 
a first financial transaction request (abstract); applying a plurality of rules to the first 
financial transaction request to determine a first score, each of the plurality of rules 
having a weight (Figure 1); determining a first indication of whether the first financial 
transaction request is likely fraudulent based on the first score (paragraphs [0043, 0045, 
0066, 01 15]). Additionally Lee et al. '649 disclose adjusting the weight of at least one of 
the plurality of rules in response to a command from a user (paragraphs [0075, 0210 - 
0214]); receiving a second financial transaction request (104, 110; Figures 1 & 2), and 
applying the plurality of rules to the second financial transaction request to determine a 
second score (paragraphs [0045, 0066, 0115], i.e. in order to learn the pattern of 
transactions, first transactions must be made to have something to compare the second 
transactions to); wherein the IHS is a first IHS, and comprising: receiving the first 
financial transaction request from a second HIS (104, 110; see Figures 1 & 2); wherein 
receiving the first financial transaction request comprises: receiving the first financial 
transaction request from the second IHS through a global computer network (paragraph 
[0139]); and to the second IHS through the global computer network, outputting an 
indication of whether the first financial transaction request is likely fraudulent 
(paragraphs [0342 - 0348]). Lee et al. '649 further disclose that the financial 
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transaction request includes determining the first indication includes comparing the first 
score to a threshold (paragraph [0043, 0045, Figures 1 and 2]). 

Lee et al. '649 disclose the method substantially as claimed, as advanced above 
with the exception of explicitly requiring accessing an actual outcome of the first 
financial transaction request to determine a result indicating whether the first indication 
was correct based on the actual income and automatically modifying the weight of at 
least one of the plurality of rules based on the result. However, Lee et al. '649 does 
disclose a transaction detection rate that represents the number of correctly identified 
fraudulent orders and a transaction false-positive rate that represents the number of 
orders incorrectly identified as fraudulent orders. Lee et al. '649 further disclose using 
these rates to determine the score thresholds (paragraphs [0364-0370]). Sartor et al. 
71 1 disclose that the values of the variables can be set according to the actual history 
of fraud (paragraph [0003]). Therefore, it would have been obvious to one of ordinary 
skill in the art at the time the invention was made to modify Lee et al. '649, in view of the 
teachings of Sartor et al. 71 1 , to access an actual outcome of the first financial 
transaction after determining a result indication whether the first indication was correct 
for the basic reason of reducing the false-positive rate. 

Regarding claims 13-23, 25, 27, 28, 45-55, 57, 59, and 60, Lee et al. '649 
disclose a method/system performed by an information handling system ("IHS") 
comprising: determining whether a first financial transaction request is actually 
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fraudulent; and in response to determining whether the first financial transaction request 
is actually fraudulent, adjusting respective weights of a plurality of rules for determining 
whether a second financial transaction request is likely fraudulent (abstract; paragraphs 
[0045, 0066, 0075, 01 15, 0210-0214]). Additionally, Lee et al. '649 disclose outputting a 
first indication of whether the first financial transaction request is likely fraudulent based 
on the first score (paragraphs [0364-0371]); determining a second score for the second 
financial transaction request by applying the plurality of rules to the second financial 
transaction (paragraphs [0043, 0045, 0066, 0115]), determining whether the second 
financial transaction request is actually fraudulent; and in response to determining 
whether the second financial transaction request is actually fraudulent, adjusting the 
weight of at least one of the plurality of rules for determining whether a third financial 
transaction request is likely fraudulent (paragraphs [0045, 0066, 0075, 01 15]); wherein 
the IHS is a first IHS, and comprising: receiving the second financial transaction request 
from a second HIS (104, 110, Figures 1 and 2); wherein receiving the second financial 
transaction request comprises: receiving the second financial transaction request from 
the second IHS through a global computer network (paragraph [0139]); and to the 
second IHS through the global computer network, outputting an indication of whether 
the second financial transaction request is likely fraudulent (paragraphs [0342-0348]). 
Lee et al. '649 further disclose that the first financial transaction request is actually non- 
fraudulent (paragraphs [0036, 0037, 0043]; i.e. the transactions that are used to develop 
the history of purchases); wherein the first financial transaction request is actually 
fraudulent (paragraphs [0036, 0037, 0043]; i.e. the first transaction made to a particular 
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merchant that doesn't fit the users profile); wherein the first financial transaction request 
includes information about a financial account that is associated with the first financial 
transaction request (paragraph [0043]); adjusting the weight of at least one of the 
plurality of rules in response to a command from a user (paragraphs [0075, 0210- 
0214]); wherein adjusting the weights comprises: adjusting the weight of at least one of 
the plurality of rules to improve a predictive accuracy of the weights (paragraphs [0075, 
0210-0214]); and in response to determining whether the first financial transaction 
request is actually fraudulent, adjusting a threshold and applying the threshold to the 
second score for determining whether the second financial transaction request is likely 
fraudulent (paragraphs [0064-0067]). 

Additionally, Lee et al. '649 disclose that in response to determining whether the 
first financial transaction request is actually fraudulent, storing an actual result for the 
first financial transaction request and the first financial request to a valid/invalid 
transaction database (314). 

Lee et al. '649 disclose the method substantially as claimed, as advanced above 
with the exception of explicitly requiring automatically modifying the weight of at least 
one of the plurality of rules based on the result. However, Lee et al. '649 does disclose 
a transaction detection rate that represents the number of correctly identified fraudulent 
orders and a transaction false-positive rate that represents the number of orders 
incorrectly identified as fraudulent orders. Lee et al. '649 further disclose using these 
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rates to determine the score thresholds (paragraphs [0364-0370]). Sartor et al. 71 1 
disclose that the values of the variables can be set according to the actual history of 
fraud (paragraph [0003]). Therefore, it would have been obvious to one of ordinary skill 
in the art at the time the invention was made to modify Lee et al. '649, in view of the 
teachings of Sartor et al. 71 1 , for the basic reason of reducing the false-positive rate. 

Lee et al. '649 discloses the method substantially as claimed, as advanced 
above, with the exception of requiring: (a) that the plurality of rules include at least one 
positive rule that, if satisfied, indicates that a financial transaction request has an 
increased likelihood of being non-fraudulent (claim 9, lines 1-3; claim 11, lines 2-3; claim 
41, lines 1-3; claim 43, lines 2-3; claim 58, lines 1-3); (b) that the plurality of rules 
include at least one negative rule that, if satisfied, indicates that a financial transaction 
request has a reduced likelihood of being non-fraudulent (claim 10, lines 1-2; claim 11, 
lines 4-5; claim 42, lines 1-2; claim 43, lines 4-5; claim 58, lines 3-4); and (c) that a 
value of the at least one positive rule's weight is variable between zero and a number 
having a first +/- sign; and a value of the at least one negative rule's weight is variable 
between zero and a number having a second +/- sign opposite of the first +/- sign (claim 
12, lines 1-5; claim 44, lines 1-5). 

Regarding (a) - (c), Lee et al. '649 does disclose that there are a plurality of rules, 
and that the merchants can, "write policies formulated as computational rules that 
become active within the rules engine the merchants define, edit, delete any rule it 
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desires... the rules enables the merchant's fraud-risk prediction system to automatically 
determine actions based on fraud scores..." (paragraph [0075]). Therefore, it would 
have been obvious to one of ordinary skill in the art at the time the invention was made 
that the merchant could make a positive rule that indicates non-fraudulent activities and 
a negative rule that indicates fraudulent activities for the basic reason creating rules that 
work best for the user. Additionally, Lee et al. '649 disclose that the rules can be 
changed however the user sees fit, which would include editing the rule's weight value 
of both positive and negative rules to include sign changes for the obvious reason of 
allowing the user to customize the system to their use. 

Regarding claims 97-1 04 and 111-116, these claims are substantially similar to 
claims 1-28 and 33-60, and are rejected using the same art and rationale, as advanced 
above. 

With respect to claims 105-1 10: Lee et al. '649 discloses that financial account 
information includes at least one of account holder information, account number 
information, account expiration information, and account billing information (paragraph 
[0064]); that previous financial transaction request includes transaction information 
(paragraph [0065]); that the transaction includes at least one of shipping information 
and transaction type information (paragraph [0064]); that the transaction information 
includes IP address information and that the IP address information is associated with a 
customer (paragraph [0064]). 
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Response to Arguments 

Applicant's arguments with respect to claims 1-28, 33-60, and 97-1 16 have been 
considered but are moot in view of the new ground(s) of rejection. 

Conclusion 

Examiner has pointed out particular references contained in the prior arts of 
record in the body of this action for the convenience of the applicant. Although the 
specified citations are representative of the teachings in the art and are applied to the 
specific limitations within the individual claim, other passages and figures may apply as 
well. It is respectfully requested from the applicant, in preparing the response, to 
consider fully the entire references as potentially teaching all or part of the claimed 
invention, as well as the context of the passage as taught by the prior arts of disclosed 
by the examiner. 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See M PEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
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mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to LINDSAY M. MAGUIRE whose telephone number is 
(571 )272-6039. The examiner can normally be reached on M-F: 7-4. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Abdi can be reached on (571) 272-6702. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Lindsay M. Maguire /Kambiz Abdi/ 

8/28/08 Supervisory Patent Examiner, 

/Lindsay M Maguire/ Art Unit 3692 

Examiner, Art Unit 3692 



